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WHAT IS CLAIMED IS : 

1 . A computer security system, comprising: 

a security module adapted to control access to a secure computer resource by a user 
via a client based on verification of a security credential provided by the user; and 

verification data disposed on the client and accessible by the security module, the 
security module adapted to enable the user to recover the security credential based on a 
response received fi-om the user associated with the verification data. 

2. The system of Claim 1, wherein the security module is adapted to enable the 
user to reset the security credential based on the response. 

3. The system of Claim 1, wherein the security module is adapted to generate a 
query to present to the user based on the verification data. 

4. The system of Claim 1, wherein the security module is adapted to control 
booting of the client based on the response. 

5. The system of Claim 1, wherein the security module is adapted to initiate a 
collection module to acquire the verification data fi-om the user. 

6. The system of Claim 1, wherein the security module is adapted to encrypt the 
security credential based on the verification data. 

7. The system of Claim 1, wherein the security module is adapted to decrypt an 
encrypted security credential based on the response. 

8. The system of Claim 1, wherein the security module is disposed in a basic 
input/output system (BIOS). 

9. The system of Claim 1, wherein the security module is adapted to control 
access to a secure communications network. 
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10. The system of Claim 1, wherein the security module is adapted to control 
access to a computer network resource. 

11. The system of Claim 1, wherein the security module is adapted to enable the 
user to retrieve the security credential based on the response. 

12. The system of Claim 1, wherein the security module is adapted to 
automatically reset the security credential based on the response. 

13. The system of Claim 1, wherein the security module is disposed on the client. 

14. A computer security system, comprising: 

means for controlling access to a secure computer resource associated with a cHerit 
based on verification of a security credential provided by a user of the client; and 

means, disposed on the client, for enabling the user to recover the security credential 
based on a response received from the user via the controlling means. 

15. The system of Claim 14, wherein the means for enabling comprises means for 
generating a query presentable to the user. 

16. The system of Claim 14, wherein the controlling means comprises means for 
controlling booting of the client based on the response. 

17. The system of Claim 14, further comprising means for initiating a collection 
module for acquiring verification data from the user. 

18. The system of Claim 14, fiirther comprising means for automatically resetting 
the security credential based on the response. 
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19. A computer security method, comprising: 

receiving a request at a client to access a secure computer resource, a security 
credential required from the user to access the secure computer resource; 
presenting verification data disposed on the client to the user; and 
enabling the user to recover the security credential based on a response received from 
the user to the verification data. 

20. The method of Claim 19, fiirther comprising initiating booting of the client 
based on the response. 

21. The method of Claim 19, wherein presenting the verification data comprises 
generating a query to present to the user for recovery of the security credential. 

22. The method of Claim 19, wherein enabling the user to recover the security 
credential comprises enabling the user to reset the security credential based on the response. 

23. The method of Claim 19, fixrther comprising initiating a collection module to 
acquire the verification data from the user. 

24. The method of Claim 19, fiirther comprising encrypting the security credential 
based on the response received from the user to the verification data. 

25. The method of Claim 19, fiirther comprising decrypting an encrypted security 
credential based on the response received from the user to the verification data. 

26. The method of Claim 19, further comprising receiving the response to a query 
presented to the user for recovery of the security credential. 

27. The method of Claim 19, fiirther comprising accessing a secure computer 
communications network based on the response. 
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28. The method of Claim 19, further comprising accessing a secure computer 
network resource based on the response. 

29. The method of Claim 19, wherein enabUng the user to recover the security 
credential comprises enabling the user to retrieve the security credential based on the 
response. 

30. The method of Claim 19, wherein enabling the user to recover the security 
credential comprises automatically resetting the security credential for the user based on the 
response. 

31. A computer security system, comprising: 

a collection module adapted to receive and store verification data associated with a 
user on a client; and 

a recovery module adapted to enable the user to recover a security credential 
associated with accessing a secure computer resource via the client by verifying a user 
response to the verification data. 

32. The system of Claim 31, wherein the recovery module is adapted to generate a 
query presentable to the user based on the verification data. 

33. The system of Claim 3 1 , wherein the recovery module is adapted to enable the 
user to reset the security credential. 

34. The system of Claim 31, wherein the recovery module is disposed within a 
basic input/output system (BIOS). 

35. The system of Claim 31, further comprising an encryption/decryption module 
adapted to encrypt the security credential using the verification data. 

36. The system of Claim 31, further comprising an encryption/decryption module 
adapted to decrypt the security credential based on the response. 
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37. The system of Claim 3 1 , wherein the recovery module is adapted to enable the 
user to retrieve the security credential. 

38. The system of Claim 31, wherein the recovery module is adapted to 
automatically reset the security credential for the user based on the user response. 

39. The system of Claim 31, wherein the recovery module is disposed on the 

client. 



